https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-59690.htmlhttps://patchthecve.com/cve/CVE-2026-59690.htmlTue, 11 Aug 2026 14:11:42 +0000HIGH 8.0: A Missing Authorization vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, MOVEit WAF, and Multi Tenant allows an authenticated attacker with low privileges to perform privileged administrative operations via the REST API that should not be accesshttps://patchthecve.com/cve/CVE-2026-59689.htmlhttps://patchthecve.com/cve/CVE-2026-59689.htmlTue, 11 Aug 2026 14:12:35 +0000HIGH 8.0: An Incorrect Authorization vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF allows an authenticated attacker with low privileges to escalate privileges to root on the affected appliance, potentially resulting in full system comprohttps://patchthecve.com/cve/CVE-2026-59688.htmlhttps://patchthecve.com/cve/CVE-2026-59688.htmlTue, 11 Aug 2026 14:12:51 +0000HIGH 8.4: An OS Command Injection vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF allows an authenticated attacker with high privileges to execute arbitrary operating system commands on the affected appliance via the backup restore functiohttps://patchthecve.com/cve/CVE-2026-59687.htmlhttps://patchthecve.com/cve/CVE-2026-59687.htmlTue, 11 Aug 2026 14:13:02 +0000HIGH 8.4: An OS Command Injection vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF allows an authenticated attacker with high privileges to execute arbitrary operating system commands on the affected appliance via the Geo Location managemenhttps://patchthecve.com/cve/CVE-2026-59686.htmlhttps://patchthecve.com/cve/CVE-2026-59686.htmlTue, 11 Aug 2026 14:13:12 +0000HIGH 8.4: An OS Command Injection vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF allows an authenticated attacker with high privileges to execute arbitrary operating system commands on the affected appliance via the management interface, https://patchthecve.com/cve/CVE-2026-8037.htmlhttps://patchthecve.com/cve/CVE-2026-8037.htmlThu, 15 Oct 2026 14:17:29 +0000CRITICAL 9.6: OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an un-authenticated attacker to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in multiple command endpoints